Replace Mcrypt with OpenSSL

by

Blowfish is the block cipher. It requires the data to be padded before encryption.
OpenSSL uses PKCS#7 and mcrypt uses PKCS#5. Different padding algorythms for data.
Minimal PKCS#5 padding length is 0, for PKCS#7 it’s 1 (wikipedia). Take a look at this example (i’ve manually padded input data for mcrypt_encrypt() in PKCS#7 style):

<?php 

$key = "anotherpassword1";
$str = "does it work 12";

$enc = mcrypt_encrypt(MCRYPT_BLOWFISH, $key, $str."\1", MCRYPT_MODE_ECB);
$dec = mcrypt_decrypt(MCRYPT_BLOWFISH, $key, $enc, MCRYPT_MODE_ECB);
echo(bin2hex($enc).PHP_EOL);
var_dump($dec);

$enc = openssl_encrypt($str, 'bf-ecb', $key, true);
$dec = openssl_decrypt($enc, 'bf-ecb', $key, true);
echo(bin2hex($enc).PHP_EOL);
var_dump($dec);

?>

It’s impossible to openssl_decrypt() data encrypted with mcrypt_encrypt(), unless manual data padding was made with PKCS#7 before mcrypt_encrypt() was called.

There is only one way in your case – recrypt the data.

PS: There is an error in your source – ECB mode does not uses IV at all (wikipedia)

More Related Contents:

  1. Upgrading my encryption library from Mcrypt to OpenSSL
  2. Preparing for removal of Mcrypt in PHP 7.2
  3. mcrypt_encrypt to openssl_encrypt, and OPENSSL_ZERO_PADDING problems
  4. Best way to use PHP to encrypt and decrypt passwords? [duplicate]
  5. mcrypt is deprecated, what is the alternative?
  6. Laravel requires the Mcrypt PHP extension
  7. HTTPS and SSL3_GET_SERVER_CERTIFICATE:certificate verify failed, CA is OK
  8. How to add/remove PKCS7 padding from an AES encrypted string?
  9. Encrypting / Decrypting file with Mcrypt
  10. Unable to find the wrapper “https” – did you forget to enable it when you configured PHP?
  11. Generating cryptographically secure tokens
  12. Laravel certificate verification errors when sending TLS email
  13. OPENSSL file_get_contents(): Failed to enable crypto
  14. SSL operation failed with code 1: dh key too small
  15. You must enable the openssl extension to download files via https
  16. TLS 1.2 not working in cURL
  17. SSL error SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
  18. MCrypt rijndael-128 to OpenSSL aes-128-ecb conversion
  19. PHP7.1 mcrypt alternative
  20. Issue in installing php7.2-mcrypt
  21. How to do AES256 decryption in PHP?
  22. Decrypting strings in Python that were encrypted with MCRYPT_RIJNDAEL_256 in PHP
  23. PHPMailer generates PHP Warning: stream_socket_enable_crypto(): Peer certificate did not match expected
  24. Use of Initialization Vector in openssl_encrypt
  25. OpenSSL not working on Windows, errors 0x02001003 0x2006D080 0x0E064002
  26. How can I install mcrypt under PHP7? Laravel needs it
  27. Installing mcrypt extension for PHP on OSX Mountain Lion
  28. Apple Sign In “invalid_client”, signing JWT for authentication using PHP and openSSL
  29. Mcrypt js encryption value is different than that produced by PHP mcrypt / Mcrypt JS decrypt doesn’t work for UTF-8 chars
  30. Fatal error: Call to undefined function openssl_random_pseudo_bytes()

Leave a Comment